# Logstash not parsing multiple logs for different type

**URL:** https://discuss.elastic.co/t/logstash-not-parsing-multiple-logs-for-different-type/93606
**Category:** Logstash
**Created:** [July 18, 2017, 2:59pm UTC](https://discuss.elastic.co/t/logstash-not-parsing-multiple-logs-for-different-type/93606 "2017-07-18T14:59:03Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![Ahmed.O](https://avatars.discourse-cdn.com/v4/letter/a/e9bcb4/32.png) [@Ahmed.O](https://discuss.elastic.co/u/Ahmed.O)
#### Post date: [July 18, 2017, 2:59pm UTC](https://discuss.elastic.co/t/logstash-not-parsing-multiple-logs-for-different-type/93606/1 "2017-07-18T14:59:03Z")

</div>

Hi Team,

I have been looking for logstash configuration that should parse two different log types and to create different indexes for types. in my case i have .log and .CSV file types, That i'm capturing through filebeat using different prospects paths. here is the filebeat configuration.  
 ![](https://us1.discourse-cdn.com/elastic/original/3X/5/0/500f20750aab7a385d37875e2d665dcb4de8789a.png)  
Here is my logstash configurtaion.

 ![](https://us1.discourse-cdn.com/elastic/original/3X/8/3/833625e1a6386c262092d80752e2b45649453709.png)

I'm not getting the desired result, there is only index created in elastic with XYZlogs-date.  
seams iis logs are not getting parsed , is that related to the if condition for iis. Any help from team is highly Appreciated.

---

<div class="post-metadata">

### Author: ![Andrew\_Cholakian1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrew_cholakian1/32/3612_2.png) [@Andrew\_Cholakian1](https://discuss.elastic.co/u/Andrew_Cholakian1)
#### Post date: [July 21, 2017, 3:47pm UTC](https://discuss.elastic.co/t/logstash-not-parsing-multiple-logs-for-different-type/93606/2 "2017-07-21T15:47:27Z")

</div>

I believe you are using the `[type]` when you should be using `[@metadata][type]`. See the [Filebeat Logstash Output](https://www.elastic.co/guide/en/beats/filebeat/current/logstash-output.html) documentation for details.

---

<div class="post-metadata">

### Author: ![Ahmed.O](https://avatars.discourse-cdn.com/v4/letter/a/e9bcb4/32.png) [@Ahmed.O](https://discuss.elastic.co/u/Ahmed.O)
#### Post date: [August 4, 2017, 4:38pm UTC](https://discuss.elastic.co/t/logstash-not-parsing-multiple-logs-for-different-type/93606/3 "2017-08-04T16:38:38Z")

</div>

Thanks Andrew, after some tweaks it got set.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 1, 2017, 4:38pm UTC](https://discuss.elastic.co/t/logstash-not-parsing-multiple-logs-for-different-type/93606/4 "2017-09-01T16:38:39Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.